Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/05820a897e090cc17411129464e856f3f8c8966d.mft
File:                     05820a897e090cc17411129464e856f3f8c8966d.mft (raw, json)
Hash identifier:          x33kFhpeL1U6OkhqDaQQHR0FhD34LgP1QAQdFkRwdCs=
Subject key identifier:   0D:38:74:1E:BB:27:3F:FB:1E:1B:CB:CA:A0:54:E4:4E:3D:29:34:BD
Authority key identifier: 57:56:0F:F3:61:EC:70:AA:A6:73:92:E9:1A:7E:5F:A0:92:19:FD:1A
Certificate issuer:       /CN=05820a897e090cc17411129464e856f3f8c8966d
Certificate serial:       12E182
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05820a897e090cc17411129464e856f3f8c8966d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/05820a897e090cc17411129464e856f3f8c8966d.mft
Manifest number:          097A
Signing time:             Mon 15 Apr 2024 04:21:04 +0000
Manifest this update:     Mon 15 Apr 2024 03:20:26 +0000
Manifest next update:     Thu 18 Apr 2024 06:29:26 +0000
Files and hashes:         1: 055eec246ba737076fa09c987164c80f57b9b191.roa (hash: 3vpWTVXHfd+ND35l8H3ESG3qpuoeKdbZoWxWXq6nkzk=)
                          2: 05820a897e090cc17411129464e856f3f8c8966d.crl (hash: gruDXB6vXU3O78bzQzYK6yOgPint+yYrs8huUe9BKpw=)
                          3: 12d495ccb9a42ffdb91e60d420dbc3b87861dc38.roa (hash: GsLs0ll4joT4XatjQBb92PoDnPJwh8c0doZvmYq7V2U=)
                          4: 50396610447765c8dd876bfc38093f3232ffe5b7.roa (hash: wGUMOGPzD0CAQ8AXHdXAIYJJ1Pv5YTfLu8pA+s1wlp8=)
                          5: 8e99da1a02e4a862e965c54706e0e6b4ce77cdc5.roa (hash: 1ERJ9lzw0uSH9WETTF8zseIOLH94i0oGUgZubMIFHvw=)
                          6: 91e82ec14e8f60ae9bbc4ecc3fc91f7df1effd91.roa (hash: TkrS6yDX3Tu2FD0mIV8HKku8iL+niXlNUgGtX72DVsk=)
                          7: 98b7ae1dd41e3272c3e244c5d637d062fb22e7c7.roa (hash: QVaV/NSTbZM7THDy5jKROuOqADjJOl+gDB3YBPSj6Zo=)
                          8: daba0023da376bffd0f2960dbd4f5b756dec2479.roa (hash: MuzEnBO4yWtJpeBH7BMEKykcZJuYE2X95cyHexFmKKE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1237378 (0x12e182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05820a897e090cc17411129464e856f3f8c8966d
        Validity
            Not Before: Apr 15 03:20:26 2024 GMT
            Not After : Apr 18 06:29:26 2024 GMT
        Subject: CN=307ff72cfc2ee9cb3e3de26c919b657f60825f1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6d:75:de:53:1a:d4:ef:29:7b:c9:0d:81:fc:
                    98:b5:40:09:66:28:24:1c:08:db:cf:9c:c8:d0:a0:
                    6d:ac:c2:08:37:fa:0c:83:21:6c:e4:ee:5f:62:71:
                    54:81:db:64:1e:97:91:d9:a3:bf:2d:d6:c4:fb:c4:
                    7a:b1:73:40:ae:25:33:37:99:e9:d3:85:e2:72:74:
                    d7:ac:7a:16:0a:71:2c:80:cf:97:7a:66:26:f6:fd:
                    dd:39:df:0b:76:e4:3e:d4:c3:6a:51:1a:d0:c1:df:
                    70:be:f1:c5:c1:48:dd:d4:a2:31:06:2c:36:77:7c:
                    f0:0e:71:13:a3:b4:67:6f:7a:6e:86:a5:88:92:83:
                    79:31:39:5d:2e:1c:cd:a9:cf:3f:cc:87:6d:42:45:
                    c4:76:12:a6:79:dd:60:38:be:79:69:22:20:9a:37:
                    10:ba:6a:ff:85:52:73:2d:c2:9d:9d:e4:c8:76:af:
                    65:cf:42:ec:74:70:27:fe:f2:f7:08:21:a2:33:6a:
                    3c:e9:09:3c:06:d6:58:69:96:e8:b5:b0:99:d1:49:
                    9b:dc:f6:b0:a9:f9:09:6e:d9:9f:2d:21:94:e0:f0:
                    76:b0:e9:7e:f1:66:a1:45:92:7a:be:14:57:ab:33:
                    dc:d0:b5:c6:7a:9d:d7:85:cf:d3:1d:ca:8a:72:7f:
                    f4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:38:74:1E:BB:27:3F:FB:1E:1B:CB:CA:A0:54:E4:4E:3D:29:34:BD
            X509v3 Authority Key Identifier:
                keyid:57:56:0F:F3:61:EC:70:AA:A6:73:92:E9:1A:7E:5F:A0:92:19:FD:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05820a897e090cc17411129464e856f3f8c8966d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/05820a897e090cc17411129464e856f3f8c8966d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/05820a897e090cc17411129464e856f3f8c8966d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:a7:2a:02:c3:1e:76:d6:da:3d:ed:d3:0d:2a:3f:f8:8f:b9:
         7c:f9:f3:5a:56:54:d6:5f:b6:06:68:dc:fe:0d:00:34:67:bc:
         de:99:e7:53:12:45:ac:ff:8d:3b:a0:1e:28:f4:4e:7e:d5:4a:
         d6:97:18:0d:a1:71:f4:ae:cc:c4:31:a5:9c:b7:68:2c:f6:ea:
         18:aa:85:a0:9c:59:76:fc:d9:43:01:b5:d9:c8:31:03:02:bb:
         cf:ae:d7:25:7f:ff:73:f0:81:8c:00:da:d7:20:39:6d:36:1b:
         b2:81:ac:ee:9d:1b:cc:09:a9:76:c5:3a:89:b4:ba:1a:a1:87:
         ec:c9:c1:e1:ca:0d:04:ba:37:89:3d:85:d9:a8:fe:d8:19:87:
         9f:c0:eb:6e:24:dd:cd:18:9b:e1:e8:f9:f4:17:cd:68:0c:37:
         a5:a0:35:eb:9f:bb:f2:f2:01:92:7f:28:d1:d0:10:3e:29:49:
         e8:0d:9c:9d:33:5b:96:30:3d:94:53:b6:b2:65:73:8b:36:7b:
         47:46:e7:6f:f2:a9:c9:04:fc:3e:c1:1c:e0:79:09:5b:54:4c:
         ac:01:6b:21:55:75:b8:98:21:b0:3f:ab:2f:f4:bc:fe:7a:63:
         b2:ce:ed:aa:43:2d:df:91:18:76:10:b9:3b:03:97:61:9d:18:
         9a:5a:f5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----